Latest in Gear

Image credit: Reuters/Dado Ruvic

Equifax's data breach response has its own security flaw

The PIN code that locks your credit report is easy to guess.
508 Shares
Share
Tweet
Share
Save

Sponsored Links

Reuters/Dado Ruvic

The Equifax data breach is already unnerving thanks to the sheer scale of sensitive data involved, but it's not helped by the credit reporting agency's initial response. Clients have discovered that the PIN codes Equifax is handing out to help lock your credit report (so a thief can't open a line of credit in your name) are generated by the date and time you made the request. An attacker could determine your code simply through brute force, especially if they have an idea as to when you locked your report.

For its part, Equifax is improving its approach relatively quickly. The company tells Ars Technica that it's moving to a randomized PIN generation system within a day of this writing (no later than September 12th), and that you can always change your existing PIN. We've asked the company for more details as well. However, it's safe to say that the security flaw is more than a little embarrassing for Equifax. Right now, the company is scrambling to limit the damage to 143 million Americans -- the last thing it needs is to create another opportunity for identity theft.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
508 Shares
Share
Tweet
Share
Save

Popular on Engadget

Engadget's Guide to Privacy

Engadget's Guide to Privacy

View
Google Chrome now offers better theme customization and tab grouping

Google Chrome now offers better theme customization and tab grouping

View
Leaked screenshots show how Apple's tracker tags might work

Leaked screenshots show how Apple's tracker tags might work

View
Tesla targets Nürburgring EV record next month

Tesla targets Nürburgring EV record next month

View
Mark Zuckerberg visited Donald Trump at the White House

Mark Zuckerberg visited Donald Trump at the White House

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr